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Abstract 

Many classical randomized algorithms (e.g., approximation algorithms for ^P-complete 
problems) utilize the following random walk algorithm for almost uniform sampling from a 
state space S of cardinality N: run a symmetric ergodic Markov chain P on S for long enough 
to obtain a random state from within e total variation distance of the uniform distribution over 
S. The running time of this algorithm, the so-called mixing time of P, is 0((5^^ (log A'^+log e~^)), 
where 5 is the spectral gap of P. 

We present a natural quantum version of this algorithm based on repeated measurements 
of the quantum walk Ut = e~'^*. We show that it samples almost uniformly from S with loga- 
rithmic dependence on just as the classical walk P does; previously, no such quantum walk 
algorithm was known. We then outline a framework for analyzing its running time and formulate 
two plausible conjectures which together would imply that it runs in time C>((5-i/2 log AT log e"!) 
when P is the standard transition matrix of a constant-degree graph. We prove each conjecture 
for a subclass of Cay ley graphs. 

1 Introduction 

1.1 Quantum walks and algorithms 

In the design of quantum algorithms, we are interested in identifying problems whose time com- 
plexity appears to drop significantly if we allow solution by a quantum computer. Notable examples 
discovered thus far include the hidden subgroup problem (Simon j^S], Shor Kitaev H7], Hall- 
gren [20! ) the unstructured search problem (Grover ^H])- While the apparent quantum speedup 
is exponential for the hidden subgroup algorithms (which use the powerful quantum Fourier trans- 
form), the quadratic speedup of Grover 's search algorithm is significant in that it is transferrable 
to a broad array of problems, as the search problem is perhaps the most fundamental in computer 
science. 

Over the last several years, a family of algorithms based on quantum walks (see the surveys by 
Kempe and Ambainis [31) has emerged as a considerable generalization of Grover 's algorithm. 
A quantum walk is the analogue of a classical random walk in that it is the powering of a single, 
often sparse, matrix; in the quantum case this matrix is unitary rather than stochastic. Discrete- 
time quantum walks were first investigated in the computer science community by Meyer [201 and 
Watrous [2H|) then more explicitly by Nayak et al. |32l l^ and Aharonov et al. pp. They have been 
used in quantum algorithms for the element distinctness problem (Ambainis jlj), matrix product 
verification (Burhman and Spalek [S]), finding triangles in graphs (Magniez, Santha, and Szegedy 
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j29j'). finding subsets (Childs and Eisenberg JJ), and group commutativity testing (Magniez and 
Nayak |2H])- Continuous-time quantum walks were introduced by Childs, Farhi, and Gutmann 
jl7l I12j . They were used by Childs et al. ^Oj to solve in polynomial time an oracle problem for 
which no polynomial-time classical algorithm exists.^ 

1.2 Quantum hitting and mixing times 

Each of the quantum walk algorithms we have just mentioned solves a particular instance of the 
following abstract search problem: given a graph structure (i.e., a state space with allowed transi- 
tions) and a subset of states which are marked, find a marked state (if one exists) by performing 
a quantum walk on the graph. In the decision version of the problem, we need only detect with 
constant success probability whether or not the marked subset is nonempty; we call its complexity 
(measured in walk steps) the quantum hitting time? The discrete- and continuous-time versions of 
the quantum hitting time on various graphs have been studied by a number of researchers (see e.g., 
[IJ 1211 ESI m 1^ m ) • Szegedy [SHI EH extended the notion of discrete-time quantum hitting time 
to "quantized" Markov chains and showed the following general result: given a symmetric ergodic 
Markov chain with classical hitting time Thit, we can define a natural unitary quantum walk with 

1/2 

the same locality whose quantum hitting time is 0(tj^4 ). In particular, the classical hitting time 
of a Markov chain with spectral gap 5 and a fraction e of its states marked is 0{{5e)~^), so the 
quantum hitting time is 0((fe)~^/^). 

For classical Markov chains, the mixing time parameter is as significant in applications as the 
hitting time, if not more so. The mixing time of an ergodic Markov chain measures the time past 
which the current state distribution is within e distance of its (limiting) stationary distribution 
over all states, independent of what the initial state was. Thus, the mixing time characterizes the 
complexity of sampling from the states of a Markov chain with respect to the stationary distribution. 
The most famous application in theoretical computer science is in the Markov chain Monte Carlo 
(MCMC) method for approximate sampling and counting. An important special case is the problem 
of almost uniform sampling (see Jerrum |^), where we wish to output an element from within 
e total variation distance of the uniform distribution over a finite set, in this case by running a 
symmetric Markov chain whose stationary distribution is uniform over the set until it has e-mixed. 

1.3 Our contributions 

In light of the success of quantum walks in speeding up classical search algorithms, an obvious 
question to ask is: can classical sampling algorithms based on mixing of random walks be sped up 
by using quantum walks instead? Aharanov et al. ^ were the first to look closely at the subject 
of (time-averaged) limiting distribution for a quantum walk and to define a notion of quantum 
mixing time to reach this distribution. A number of important questions were raised in their 
paper. We consider two in particular, the first being: which distributions can we generate using 
quantum walks? Aharanov et al. ^ showed that the limiting distribution of the quantum walk on 
a regular graph is typically non- uniform (and even dependent on the initial state); we give a simple 
algorithm based on repeated measurements of the continuous-time quantum walk Ut = e~*'^* for 

^Continuous-time quantum walks can be simulated efficiently by (discrete-time) quantum circuits using techniques 
which we discuss in Section 

■^The search and decision versions for classical random walks have the same complexity; this does not appear to 
be true for quantum walks. 
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a symmetric ergodic Markov chain P (inspired by the decohering quantum walk of Kendon and 
Tregenna j2f)| I25j) that necessarily outputs a state e-close to the uniform distribution. Moreover, 
it does so with only logarithmic dependence on e~^, just as the classical walk P does. 

The second question of Aharanov et al. ^ that we consider is: when does quantum mixing 
offer a speedup over classical mixing? This question seems to be a great deal more difficult than 
the first (e.g., Aharonov et al. ^ only demonstrated a quantum speedup for the discrete-time walk 
on a cycle); we provide a framework for answering this question and then formulate two strong 
but plausible conjectures: (a) that threshold quantum mixing can be achieved in 0{6~^^'^ log N) 
time when P is the standard transition matrix of a regular graph, and (b) that amplification to 
e-mixing from threshold-mixing can be achieved in 0(loge~^) time {independent of N) when P 
is the standard transition matrix of a constant-degree graph. In particular, if both conjectures 
are true, then there is an 0((5~^/^ log A^log e~^) quantum algorithm for almost uniform sampling 
from the vertices of a constant-degree graph, as opposed to the 0(6"^ {log N + loge~^)) classical 
algorithm. We prove the amplification conjecture for the torus Z^, p prime (the proof is more 
subtle than one might expect), and we prove the threshold mixing conjecture for the hypercube 
Z2 and the complete graph K]\f. It is our hope that our approach and progress on the problem of 
almost uniform sampling via quantum walks will rejuvenate interest in characterizing the speedup 
of quantum mixing. 

2 Preliminaries 

2.1 Classical and quantum processes 

Let 5 be a set of states with |5| = N. Consider the A^-dimensional complex vector space TC{S) with 
basis states B{S) := {\s) : s G S}; in particular, this space contains the pure quantum states (i.e., 
wavefunctions) W{S) := = "^sgs 'Psls) '■ 4>s £ CVs G 5, \\4>\\2 = !}• It also contains the classical 
randomized states (i.e., distributions) V{S) := {p = X]sg5Ps|s) : Vs G K>o Vs G 5, ll^illi = 1}. 

For our purposes, it will suffice to consider the three following physically realizable processes: 
stochastic evolution T>{S) T^{S) (e.g., a symmetric Markov chain P), unitary evolution 'H{S) 
'H(S') (e.g., the quantum walk Ut : 1— > e~*'^*|(/))), and the projective measurement 7{{S) T^{S) '■ 

Remark. Processes with quantum operations and intermediate measurements produce mixed 
states (i.e., randomized ensembles of quantum states) and are typically described by their action on 
density matrices; however, our algorithm and its analysis are more simply described using classical 
and quantum state vectors alone. 

2.2 Basic properties of Markov chains 

The long-term behavior of a discrete-time Markov chain P and its continuous-time counterpart 
(Poisson average) exp(— (/ — P)t) = ^^2^=0 ^ s\" summarized by the following theorems.^ 
A stationary distribution of a Markov chain P is a distribution vr satisfying Pit = vr. 

^Note that the "missing" process ©(S) 7i(<S') is unnecessary, since it can be described as the hnear combination 
of its (non- interfering) actions on basis states B{S), which are a special case of unitary evolution. 

''Throughout this paper, we use the term Markov chain when describing either the actual chain ({-P'} in discrete 
time, {exp(— (/ — P)t)} in continuous time) or the stochastic matrix P generating the chain. 
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Theorem 2.1 (Unique stationary distribution) Let P &e irreducible (i.e., strongly connected). 
Then there exists a unique stationary distribution vr for P. 

In particular, if P is symmetric then the uniform distribution u := [j^, . . . , -^]^ = j^l^ is stationary.^ 
An irreducible Markov chain P converges in the Cesaro (i.e., time-averaged) and continuous- 
time (i.e., Poisson-averaged) limits to its stationary distribution: 

Theorem 2.2 (Fundamental theorem) Let P he irreducible. Then the stochastic matrices ^ Ylt=o -f* 

[vrvr • • • vr] = vrl^ as T ^ oo. If P is also aperiodic (i.e., non-bipartite), 
then P* vrl^ as t ^ oo, and we call P ergodic. 

An irreducible Markov chain is reversible if it satisfies the detailed balance constraints PijiTj = 
PjiTTi] or equivalently, if the matrix 5 = DPD~^ is symmetric, where D is the diagonal matrix 
with Da = y/iTi. The spectral gap (5 of a Markov chain P is the difference between 1, its largest 
eigenvalue, and A, its second-largest eigenvalue (in absolute value). The mixing time r(e) of an 
ergodic discrete-time Markov chain is min{T : \\\P^ — vrl^||i < e Vt > T}, where ^|| • ||i is the total 
variation distance. 

Theorem 2.3 (Diaconis, Strook |16|; Aldous PJ) Let P be reversible and ergodic. Then its 
mixing time satisfies ^A(5~^ ln(2e)~-^ < r(e) < 5~^(ln7r~?j^ -|- Ine^^), where VTmin := min2^7r(x).^ 

The mixing time of any irreducible Markov chain P can be defined using the Cesaro average, the 
Poisson average, or the lazy chain ^(/ -|- P); in each case, the mixing time behaves similarly up 
to the dependence on e. In most applications the key factor in Theorem 12.31 is the spectral gap. 
Sometimes we can compute this directly; other times we estimate it, say via conductance (see e.g., 

mm]). 

Theorem 12.81 implies that the following single-loop classical mixing algorithm samples from a 
distribution e-close to vr for any ergodic P, from any initial state: 

Algorithm 2.4 (Single-loop classical) Do T(e) times: Apply P to the current state. 

In describing our quantum algorithm for almost uniform sampling, we will appeal to the no- 
tions of theshold mixing and amplification, which are implicit in the classical Markov chain mixing 
algorithm as well. In particular, a (slightly weaker) variant of the previous theorem follows from 
combining the next two well-known theorems: 

The threshold mixing time Tmix of an irreducible Markov chain is Tmix := T(l/2e). 

Theorem 2.5 (Amplification) For [lne"i]. 

Theorem 2.6 (Threshold mixing - Aldous [2|) Let P be reversible and ergodic. Then < 
Tmix < ^"^1 + ^logTr^;?^^). 

In light of the amplification and threshold mixing theorems, we can view the same classical 
mixing algorithm as a double-loop algorithm instead: the inner loop builds the fast-mixing threshold 
matrix P'^mi^ from P, and the outer loop iterates this matrix only [In e~^~\ times to achieve e-mixing. 

Algorithm 2.7 (Double-loop classical) Do [lne~^] times: { Do Tmix times: Apply P to the 
current state. } 

^We use 1^ to denote the A/'- dimensional row vector of ones; f is the conjugate transpose. 

®We have impUcitly assumed here that the second-largest eigenvalue of P exceeds the smallest in absolute value; 
this is easy enough to arrange in practice by replacing P with ^{I + P). 
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2.3 Additional properties of Markov chains 

We will use several more facts about Markov chains and their mixing properties beyond the basic 
ones already mentioned; we present them here with proofs for completeness. 
Why do we set the threshold mixing timG Tmix 

to r(l/2e)? We do it precisely so that the 
amplification theorem holds (i.e., so that P'^mi>= e-mixes in time 0(loge~^)). It so happens that the 
choice l/2e is rather arbitrary beyond the fact that it is a fixed constant below 1/2, as the following 
generalization of the amplification theorem shows. 

Proposition 2.8 Let Q be a Markov chain with maximum pairwise column distance max^, ^| x) — 
Q{-,x')\\i < Q < 1. Then it has mixing time r(e) < [log;^/^ e""*^] . 

Proof: From Aldous and Fill [Sj: Let d{t) := maxx^x' ^\\Q^{',x) — Q^{'-,x')\\i be the maximum 
pairwise column distance at time t. This distance is submultiplicative; i.e., d{s + t) < d{s)d{t) 
for any s,t > 0. In particular, d(t) < (i(l)*, so d{\logi/^e~^~\) < d{\logi^^e~^~\) < e, where 
d{t) := ^IIQ* — vrl^lli and vr is the stationary distribution of Q. ■ 

In particular, if T > r(l/2e), then the columns of are (l/2e)-close to their common limit vr, so 
they have maximum pairwise distance at most 1/e. It follows that mixes in time [logge~^] = 
[lne~^], yielding the amplification theorem. 

So in order to show that a Markov chain mixes in time 0(loge~^), it suffices to show that 
its columns have maximum pairwise distance at most some constant less than one. A sufficient 
condition for this property to hold is the following: 

Proposition 2.9 Let P > ^, -j > 0; let Q be an N x N stochastic matrix with at least (3N entries 
in each column bounded below by^l / N . Thenxna.'Kx.x' \\\Q{'^x) — Q{-,x')\\i < 1 — 7(1 — 2(1-/3)) < 1. 

Proof: Recall that for any two distributions p,q we have — = 1 — X^;. minjpfc, g^}. It 
follows that maxx^x' |ll<3(-,a^) - Q{-,x')\\i < 1 - (1 - 2(1 - I3))N --//N = 1 - 7(1 - 2(1 - /?)). ■ 

We can estimate the maximum pairwise column distance of a Markov chain Q' from that of a 
nearby chain Q using the triangle inequality: 

Proposition 2.10 LetQ andQ' be Markov chains; let P := ^HQ— Q'||i andj := maxx^x' ^WQi'^^) — 
Q{-,x')\\i. ThenmaXx,x'^\\Q'{-,x)-Q'{-,x')\\i<2P + j. 

Proof: For any x,x': ^\\Q'{;x) - Q'(-,x')||i < ^\\Q'{;x) - Q(-,x)||i + l\\Q'{;x') - Q{;x')\\i + 
i||Q(-,x)-Q(-,x')||i. ■ 

3 A quantum algorithm for almost uniform sampling 
3.1 A single-loop algorithm 

Let P be an irreducible reversible Markov chain with uniform stationary distribution on the set 
S of states; equivalently, P is an irreducible symmetric Markov chain. We wish to sample almost 
uniformly from S using the quantum walk Ut = exp(—iPt) (i.e., P is the time-independent Hamil- 
tonian, or complex Hermitian matrix, driving the walk) from any initial basis state \x) G B{S). 
Aharonov et al. PP propose (a discrete-time version of) the following "single-loop" algorithm: 
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Algorithm 3.1 (Single-loop quantum) Run the walk U = e for time t chosen uniformly at 
random (u.a.r.) from [0, T], then measure and output the current state. 

Let Pt{y,x) := \{y\e~^^''\x)\'^ be the stochastic matrix mapping inputs to outputs for this algo- 
rithm for a fixed t; then the finite-time Cesaro matrix Pt := ^ J^^q Pt dt maps inputs to outputs 
for t chosen u.a.r. from [0, T]. Unlike Pt (whose columns oscillate as t — > oo), Pt has a limit 11 
as T — > oo, which we call the infinite-time Cesaro matrix. This is demonstrated by the following 
continuous-time version of Theorem 3.4 from Aharonov et al. [T], which also gives an upper bound 
on the quantum mixing time T'(e) := min{T' : ^||-Pt ~ n||i < e]:^ 

Theorem 3.2 (Cesaro matrices) Let H he a Hamiltonian with spectrum {A^., |0fc)}. Let {Cj} 
he the partition of these indices k obtained by grouping together the k with identical Afc. Then: 

PTiy,x) = j;(y|<^fc)(<^.|x)p (1) 

+ Yl i^k\x){x\cPi){y\<Pk)my)^ f_ e'^^^-^^^'dt (2) 

As r — > OO the latter term tends to zero, so the limit 11 of Pt exists and is equal to the former 
term. Hence the quantum mixing time T'(e) is the smallest T such that: 

^||PT-n||i =maxj;| i^k\x){x\cj)i){y\4>k){<Pi\y)^ f\'^^'-^'^'dt\<e (3) 

It can be inferred from this theorem that both the discrete- and continuous-time walks typically 
lack the property 11 = ul^ = x the all-ones matrix (which we require to mix to uniform, or 
even to mix to the same distribution from any two initial states, using the above algorithm), except 
in special circumstances such as when the walk takes place on the Cayley graph of an Abelian 
group and it has distinct eigenvalues. It so happens that these two special properties hold for the 
discrete-time walk on the cycle (with Hadamard coin flip); Aharonov et al. ^ show this and then 
use Theorem 13.21 to prove that its quantum mixing time is 0(A^ log A^e~^), yielding a quantum 
algorithm for almost uniform sampling on the cycle that is nearly quadratically faster than the 
classical simple random walk. They further show that walks with the property 11 = ul^ can be 
sequentially repeated in such a way that the distance of the output state from uniform drops 
exponentially with the number of walk repetitions (i.e., the dependence on is logarithmic), just 
like it does for classical Markov chains. In particular, this reduces the time required to sample 
almost uniformly from the cycle to 0(AlogiVloge~^). 

3.2 A double- loop algorithm 

What about the (typical) case when 11 7^ nl^?^ Then not only is it unclear how to obtain the 
exponential drop in closeness to uniform (i.e., logarithmic dependence on e^^), but the single- 
loop algorithm does not even sample almost uniformly, but rather from a non-uniform distribution 
dependent on the initial state. To remedy this, we propose the following "double-loop" algorithm: 

'^Aharonov et al. use a slightly different notion of quantum mixing time than we do here. 

^For a walk on the symmetric group Sr, . Gerhardt and Watrous |l8l showed that |||n — itl^||i > :^ — ^t^ttt ( "JTi ) i 
for a walk on the hypercube Z2, Moore and Russell |31| showed that there exists an e > such that ^||n — 
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Algorithm 3.3 (Double-loop quantum) Do T' times: Run the walk U = e for time t 
chosen u.a.r. from [0, T], then measure and output the current state. 

This is almost the same algorithm proposed by Aharanov et al. ^ to obtain logarithmic 
dependence on in the special case n = lilt, but we claim that for any 11 our algorithm: (a) 
samples almost uniformly, and (b) does so with logarithmic dependence on e~^. 

Let's prove claim (a): 

Theorem 3.4 (Uniform mixing) If P is a symmetric irreducible Markov chain, then each entry 
o/n is hounded from below by in particular, H is ergodic. Moreover, each of the Pt (and so 

Pt and 11 as well) is symmetric and therefore has uniform stationary distribution!^ 

Proof: The 1-eigenspace of P is precisely the space spanned by n, so it follows from Theorem 
1,3.21 that n(2/,x) > 1/iV^ for every To see that Pt{y,x) := |(2/|e~*'^*|x)p is symmetric, write 
out the Taylor series for e~^^'' and note that every positive integer power P^ is symmetric (since 
P^{x,y) = Y.zP{x^z) ■ P{z,y) = HzPiy^z) ■ Piz,x) = P^{y,x)). It follows that the stationary 
distribution of Pt is uniform. ^'^ ■ 

This implies that for any e > our algorithm will (for T and T' sufficiently large) output a state 
e-close to uniform, so claim (a) is proven. 

Now let's prove claim (b), and in the process obtain upper bounds on the minimum T and 
T' required for our algorithm to output a state e-close to uniform. First a few definitions: For 
a particular quantum walk e~*^*, fix a := max^ ,^/ i||n(-,x) — n(-, j;')||i. We define the quantum 
threshold mixing time of the walk to be t^^^ := T'(eo), where (for the time being) we set eo := 
Then we have the following easy theorem: 

Theorem 3.5 (Convergence time) For T = r^'^j^ and T' = [log2/(i+Q,) ^~^~\, our algorithm out- 
puts a state e-close to uniform. 

Proof: If T = t^^^, then the Markov chain Pt built by the inner loop is eo-close to its limit 11, 
where eg = By definition, the maximum pairwise column distance of 11 is at most a. So by 

Proposition l2.1Ul Pt has maximum pairwise column distance at most 2eo + q = Since the 

outer loop is a T'-fold repetition of Pt, choosing T' > [log2/(i+a) e~^l yields an output state within 
e distance of uniform by Proposition 12.81 ■ 

We can now state clearly what we hope to be able to do: run the quantum walk (inner loop) for 
a long enough time T so that the matrix Pt is within a small (but still constant) threshold distance 
eo from its limit 11, at which point it must have maximum pairwise column distance less than some 
constant below one (provided that 11 itself has this property) and therefore need only be applied 
T' = 0(loge^^) times (independent of N) to output a state e-close to uniform. In particular, 
this motivates us to make the next two strong but plausible conjectures for the quantum walk 
Ut = e-'P': 

Conjecture 3.6 (Amplification) Let he the supremum of a over all quantum walks for which 
P is the standard transition matrix of a constant- degree graph; then oq is strictly less than one. 

®n is also positive semidefinite: it is the Gram matrix of {/a} with fs{kl) ~ {s\<f)k) {(pA^) if -^fc ~ otherwise. 
^"More generally, the uniform distribution is stationary for any process consisting of unitary evolution followed by 
measurement, since it is invariant under both operations. 
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This would imply that we can always choose T' = 0(log e~^) for such walks. Of course, this matters 
little unless the quantum threshold mixing time is significantly faster than the classical threshold 
mixing time; to this end, we conjecture: 

Conjecture 3.7 (Threshold mixing) Any quantum walk for which P is the standard transition 
matrix of a regular graph satisfies r^^j^ < 0{5~^^^ logN). 

This would imply that we can always choose T = 0(6^^^'^ log N) for such walks. It would also 
imply (by Cheeger's inequality) that the threshold quantum mixing time is 0(1/<I>) where $ is 
the conductance of P, a question posed by Aharonov et al. By Theorem 13.51 the validity of 
both conjectures would give us an 0(5"^/^ log log e~^) quantum algorithm for almost uniform 
sampling from the vertices of a constant-degree graph. 

4 Proving the amplification and threshold mixing conjectures 
4.1 Intuition 

To show that the amplification conjecture holds for a particular P, we need an upper bound on the 
maximum pairwise column distance of 11. One way to do this is via Proposition 12.91 which tells 
us that it suffices to show that most of the entries in each column of 11 are Q(l/A). We can view 
this as a statement that the quantum walk is ergodic in a weak sense; i.e., that from any initial 
basis state, the limit of the time-averaged distribution over states induced by the quantum walk is 
roughly equivalent to the space-averaged (uniform) distribution. Indeed, for Proposition 12.91 not to 
hold, almost all of the mass from the time-averaged quantum walk distribution must be localized 
over a minority of the states. Using Theorem l3.21 we have already shown a lower bound of on 
each entry of 11 (Theorem 13. 4|) . More detailed knowledge of the spectrum of P allows us to tighten 
this lower bound, as we shall soon see in the case of the walk on the torus. 

We remark that there are regular graphs of non- constant degree for which the amplification 
conjecture fails to hold. In particular, the standard walk on the complete graph AT^r with self- 
loops mixes classically in one step, but its quantum counterpart takes time 0(Aloge~^). (This 
observation is due to Frederic Magniez.) Indeed, the squared amplitude of each off-diagonal entry 
of Uf = e~*^* remains 0{1/N'^) for the duration of the walk: 

^-iPt ^ J2 ^^P' = I + P(f; = / + p(e-^* _ 1) (4) 

s=o s=l ^' 

Since < |e~** — 1| < 2 for all t, we have \{y\e~^^^\x)\'^ < for all x / y and all t, so a = 0(1 — 1/A) 
for this walk. 

To show that the threshold mixing conjecture holds for a particular P, we need to know how 
fast the quantum walk propagates. It is known that the distribution induced by a quantum walk 
spreads quadratically faster than the corresponding random walk distribution on the line and on 
higher-dimensional lattices, for example; on the other hand, it cannot spread asymptotically faster 
than the (already optimally-spreading) random walk distribution on a bounded-degree expander. 
Motivated by these and other observations, we conjecture that the threshold mixing time of the 
quantum walk on a regular graph G is bounded above by 0(diam(G)), where diam(G) is the 
diameter of G; in particular, it is known that diam(G) = 0{5~^/'^\ogN). The threshold mixing 
conjecture is true for the (discrete-time) quantum walk on the cycle (Aharonov et al. 0) and for 
the quantum walks on the hypercube and complete graph, which we will discuss shortly. 
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4.2 The torus 

We prove the amplification conjecture for the d-dimensional torus Z^, p prime. The next two 
lemmas were proven with the help of Mario Szegedy. 

Lemma 4.1 (Eigenvalue multiplicities of Z^) Let P he the standard transition matrix on 
with d> 1 fixed, p > Ad prime, and N = p'^. Then each of the Cj consists of all I G equivalent 
to a single k ^ up to permutation and signing of the coordinates. 

Proof: Let cu = e^'^*/^. Suppose = A/ and / is not equivalent to k. Then the vanishing sum 

d 

io''^ + LO'''^ - iJi - U}~^i = (5) 

i=i 

is not simply 2d vanishing sums of length two u!^^ — u!^^ , u!~'^^ — u)~^^ over j ■ 1 < j < d. Observe 
that if we cannot decompose the above sum into length-two vanishing sums in precisely this way, 
then we cannot do so at all (since w'^^ + a = =^ a = — cj'^^ is a 2pth root of unity but not a pth 
root of unity). Hence there exists a minimal vanishing sum of length m (3 < m < Ad) of roots of 
unity (wlog, wma = 1) of common order r = p. By Theorem 5 of Conway and Jones |15j . 
prime: s\ri^ - 2) < TTi - 2; SO wc have p - 2 < 4d - 2. m 

Lemma 4.2 (Eigenvector cancellations for Z^) For any y G 'Z'j^, there are r2(n) different x G 
Z„ satisfying xyi mod n G [—n/Sd, n/Sd\ for all i : 1 < i < d. 

Proof: Consider the map / : Z„ — > given by x i— > (xyi, . . . ,xyd)- Thinking of Z^ as being 
divided into subgrids of side length n/m (with one of them, Hq, centered at 0), it is clear that one 
such subgrid (call it H) must contain at least n/m'^ of the points in the image of /. Let x'y be any of 
the image points in H. Then there are at least n/m'^ different x for which {x — x')yi G [—n/m, n/m] 
for all i. Let m = 8d; then there are at least n/{8d)'^ such x. ■ 

Theorem 4.3 (Amplification for Z^) Let P be the standard transition matrix on Z^ with d > I 
fixed, p prime, and N = p'^. Then each entry o/II is bounded below by ^(1/N), so the amplification 
conjecture is satisfied. 

Proof: Label the spectrum of P using indices A; G Z^ as follows: 

A, := i ^ cos(2^A;,/p) := ^ E (6) 

Since Z^ is vertex-transitive, it suffices to show that n(y,0) = Q{l/N); or, from Theorem 13.21 

El E e^^'''-y/P\'^ = n{N) (7) 
j keCj 

This is a consequence of the preceding two lemmas: by Lemma 14.21 at least {p/{8d)'^)'^ = Q,{N) 
of the k ^ "Lp are such that: (i) kjyi mod p G [—p/Sd,p/8d\ yi,j, thus (ii) I ■ y := kyi mod p G 
[—p/8,p/8] for all / equivalent to k up to permutation and signing of the coordinates. So by Lemma 
O which in particular shows that \Cj\ < 2'^d\ for ah j, it follows that {p / {8dYY / 2'^ d\ = Vt{N) of 
the Cj give a sum of at least 1. ■ 
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4.3 The hypercube TD^ and complete graph K^q 

We now give a simple argument showing that the threshold mixing conjecture holds for the hyper- 
cube Z2 and complete graph Kj^. 

Lemma 4.4 (Periodicity) Let P he the standard transition matrix of a regular graph G. If 
Ut = e~*'^* is periodic with period 0(diam(G)), then P satisfies the threshold mixing conjecture. 

Proof: Let T be the period; then Pt = H. So the threshold mixing conjecture is satisfied: r^j^ < 
T = 0(diam(G)) = 0{5'^/'^ log N). ■ 

Theorem 4.5 (Threshold mixing for Z2 and K^) The standard transition matrices on the 
hypercube Z'2 and complete graph satisfy the threshold mixing conjecture. 

Proof: We show that Lemma 14.41 applies in both cases. 

For the hypercube: The eigenvalues of P are 1 — for /c G Zg, where | • | is the Hamming 
weight, so the eigenvalues of ?727rn are all 1; i.e., Ut has period 2-Kn (Moore and Russell [SB)- 

For the complete graph: We may add self-loops (causing a global phase shift but no loss of 
generality) and consider the associated transition matrix P. Its eigenvalues are 1 (with multiplicity 
1) and (with multiplicity N — 1), so the eigenvalues of U2-K are all 1; i.e., Ut has period 2ti. ■ 

5 Simulability and applications 
5.1 Simulation by quantum circuits 

The quantum walk Ut = e~*^* is the continuous-time evolution of a time-independent Hamiltonian. 
This is a valid model of quantum computation; however, the discrete-time quantum circuit model 
is often preferred due to its similarity to the classical digital circuit model. We can simulate the 
continuous-time quantum walk (and our algorithm) in the circuit model in one of two ways: either 
by replacing the walk by its discrete-time counterpart (in which case simulability is immediate), or 
by showing that the dynamics of the walk are well-approximated (i.e., ||?7t — C/II2 < e) by a small 
quantum circuit U .^^ We describe briefly how to do the latter; for more detail, see Childs [HI- 

Let be a Hamiltonian and X]j=i be a decomposition of H into Hamiltonians Hj. We can 
simulate H by evolving the Hj one at a time (in round-robin fashion) by the Lie product formula 

^-iHt ^ ^^-iHrt/j . . . ^-iHrt/jy ^ o{meix\\[Hk, Hi]\\2 rt^/j) (8) 

k,l 

where [A, B] is the commutator AB — BA. Of course, we then have to worry about simulating 
each of the Hj, but this should be rather straightforward assuming that we have chosen a good 
decomposition X^j=i-ffj- For example, H = P is the standard transition matrix for the Cayley 
graph of an Abelian group (product of d cyclic groups), then we consider the natural 2(i-coloring 
of the edges E = u'j'LiEj (alternate between two colors along each of the d directions) and choose 
each Hj = Pj (1 < j < r = 2d) such that Pj{x, y) = P{x, y) for all (x, y) € Ej and Pj{x, y) = for 
all {x,y) ^ Ej. Then each of the is zero and each of the Pj is the disjoint union of locally 

simulable interactions, so the overall simulation yields no asymptotic loss in efficiency. 

'^^On the other hand, the classical continuous-time random walk for time t is trivial to simulate: simply run the 
corresponding discrete-time random walk for s steps, where s is the Poisson random variable with parameter t. 
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5.2 Application to the MCMC method 



In the design of a fully-polynomial randomized approximation scheme (FPRAS) for a ^P-complete 
problem (e.g., the permanent of a matrix |12])) it is often sufficient to construct a fully-polynomial 
almost uniform sampler (FPAUS) over the set of witnesses (solutions) [^. Markov chain Monte 
Carlo (MCMC) algorithms do this by performing a random walk over the set of witnesses. The 
mixing time of this walk shows up in the running time of the FPRAS; in fact, proving that the walk 
is rapidly mixing is typically the most challenging aspect of designing an FPRAS. If our quantum 
walk algorithm can be shown to offer a speedup over the classical random walk, it could potentially 
yield quantum speedups for a number of FPRAS 's. 

6 Conclusions and open problems 

We have presented for the first time a natural quantum algorithm based on the quantum walk 
Ut = e~*'^* that samples from a distribution e-close to uniform with logarithmic dependence on 
for any symmetric irreducible Markov chain P. We have outlined a framework for analyzing its 
running time and formulated two plausible conjectures which together would imply that it runs in 
time 0((5~^/^ log A^loge"^) when P is the standard transition matrix of a constant-degree graph. 
We have proven each conjecture for a subclass of Cayley graphs. 

The most important problems we have left open are the resolution of the amplification and 
threshold mixing conjectures. We note that the conjectures can be worked on independently, and 
that partial progress (as we have obtained for Z^) is indeed possible. In particular, we would like 
to see the threshold mixing conjecture proven for or (at least a weak form of) the amplification 
conjecture proven for Zj, so that the running time of our algorithm is determined for Z^ or Z2. 
Also, we believe that it should be possible to prove the amplification conjecture for Z^, n composite, 
by extending our line of argument. 

Another question is whether the decohering walk of Kendon and Tregenna j2Hj (which is sim- 
ilar to our algorithm, only with Poisson-distributed rather than regular Cesaro-distributed walk 
measurements) solves the almost uniform sampling problem with roughly the same running time 
as our algorithm; we suspect the answer is yes. Perhaps it can even be analyzed more easily than 
our algorithm for certain classes of walks. 

Acknowledgements. I would like to thank Mario Szegedy for many illuminating discussions 
on quantum walks and for his help in proving Lemmas 14 . II and 14 . 21 Thanks also to Frederic Magniez 
for his observation in Section [4. II 
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